DeFiFoundrySolidity
16,653 OP
View results
Submission Details
Severity: medium
Invalid

Unclaimed Balances Vulnerability

Description: Commented-out claiming mechanism in _harvestAndReport()

function _harvestAndReport() internal override {
uint256 claimable = transmuter.getClaimableBalance(address(this));
if (claimable > 0) {
// transmuter.claim(claimable, address(this)); // Commented out
}
}

Impact:

  • Potential loss of claimable rewards

  • Inefficient fund management

  • Reduced strategy performance

Proof of Concept:

Recommended Mitigation:

  • Implement automatic claiming mechanism

  • Add configurable claiming thresholds

  • Create explicit harvest functions

Updates

Appeal created

inallhonesty Lead Judge 6 months ago
Submission Judgement Published
Invalidated
Reason: Lack of quality
inallhonesty Lead Judge 6 months ago
Submission Judgement Published
Invalidated
Reason: Lack of quality

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.